The library is clearly licensed, documented, and tied to a matching source repository with a long release history. Its small audience, absent security policy, and zero recent commits suggest limited ongoing support; pin this version if adopting.
62%
Total Score
67
100
83
83
The package has existed since 2013 with 45 releases, but it has had no registry release in the last 12 months and its latest release was about 19 months ago.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the broader evidence of stalled ongoing maintenance.
There were no new or closed issues and no pull-request activity in the last month, indicating little recent project interaction, though only four issues remain open.
Seven stars, eight forks, and one watcher indicate a small user and contributor community; this is supporting evidence of limited adoption rather than a severe risk on its own.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.